Most recent entries from all

cnvd-2024-39158

2026-10-19T21:02:47.662637+00:00

cnvd-2024-39158

EUVD-2026-217201

2026-10-19T21:02:47.662669+00:00

EUVD-2026-217201

fkie_cve-2024-23320

2026-10-19T21:02:47.662684+00:00

Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can cause arbitrary, unsandboxed javascript to be executed on the server.

This issue is a legacy of CVE-2023-49299. We didn't fix it completely in CVE-2023-49299, and we added one more patch to fix it.

This issue affects Apache DolphinScheduler: until 3.2.1.

Users are recommended to upgrade to version 3.2.1, which fixes the issue.

GHSA-rc6h-qwj9-2c53 — Apache DolphinScheduler vulnerable to arbitrary JavaScript execution as root for authenticated users

2026-10-19T21:02:47.662717+00:00

Affected: Maven: org.apache.dolphinscheduler:dolphinscheduler-master

Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can cause arbitrary, unsandboxed JavaScript to be executed on the server.

This issue is a legacy of CVE-2023-49299. We didn't fix it completely in CVE-2023-49299, and we added one more patch to fix it.

This issue affects Apache DolphinScheduler: until 3.2.1.

Users are recommended to upgrade to version 3.2.1, which fixes the issue.

gsd-2024-23320

2026-10-19T21:02:47.662743+00:00

gsd-2024-23320